Security Advisory

CVE-2020-10181

9.8
CRITICAL

Vulnerability Description

goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.
Published Date March 11, 2020
Official Source NIST NVD Advisory